Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/S8FtCCfZ1FmftDX0CD2Xw7-p6Wk.roa
File: S8FtCCfZ1FmftDX0CD2Xw7-p6Wk.roa (raw, json)
Hash identifier: RzNOfkejq6IuxeHN6MGvFtgPwE/5FEzBG277ohzwVgw=
Subject key identifier: 4B:C1:6D:08:27:D9:D4:59:9F:B4:35:F4:08:3D:97:C3:BF:A9:E9:69
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019A4F90871074664046E109655C36CBCE4F
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/S8FtCCfZ1FmftDX0CD2Xw7-p6Wk.roa
Signing time: Tue 04 Nov 2025 15:51:02 +0000
ROA not before: Tue 04 Nov 2025 15:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 80.174.110.0/23 maxlen: 23
80.174.113.0/24 maxlen: 24
80.174.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:90:87:10:74:66:40:46:e1:09:65:5c:36:cb:ce:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Nov 4 15:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bc16d0827d9d4599fb435f4083d97c3bfa9e969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:32:0d:6d:0c:30:e0:83:fb:32:8f:d7:87:8c:
1f:97:eb:e0:3d:65:f7:cb:a8:b2:f7:ff:f6:13:6a:
51:7d:7c:48:45:6d:ae:0b:29:2b:08:95:3a:84:cb:
a3:56:75:f0:14:23:1c:c9:54:59:7d:67:5e:6a:c4:
57:bd:20:03:4f:cf:f3:92:ae:86:6f:69:54:28:5b:
78:aa:e0:ff:8d:15:1f:9a:42:e2:aa:95:bd:cf:66:
fc:c5:b6:78:f2:32:15:59:21:fc:f3:bb:70:b7:c1:
e0:e6:5e:b7:f3:53:fa:1d:f9:0b:1e:a6:6d:29:68:
9a:73:3a:e3:91:7d:b3:f5:e7:56:19:96:e4:67:6f:
cd:38:ff:b0:21:3a:af:95:46:93:ec:a4:73:85:83:
7b:23:55:b0:b0:b4:b6:46:e7:5d:35:6f:cf:7b:c8:
f7:f2:ba:81:94:e9:d1:b5:13:25:ac:ec:31:fb:9d:
b4:75:0b:38:57:59:54:f1:23:af:65:e2:79:af:90:
7e:df:6a:06:22:86:3c:09:86:aa:76:5e:d6:a8:53:
ec:33:69:6e:98:56:3e:35:98:87:83:db:dd:52:d1:
f9:e6:06:ea:42:98:8c:68:b9:5a:d4:a4:11:6d:28:
80:7a:54:87:dc:08:67:29:02:f7:e2:d7:23:bb:a4:
08:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C1:6D:08:27:D9:D4:59:9F:B4:35:F4:08:3D:97:C3:BF:A9:E9:69
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/S8FtCCfZ1FmftDX0CD2Xw7-p6Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.110.0/23
80.174.113.0-80.174.114.255
Signature Algorithm: sha256WithRSAEncryption
9a:37:67:58:73:0b:a3:ec:b5:23:75:f2:91:02:91:67:fb:27:
fb:bf:ca:8f:92:38:e8:f7:f1:6c:1c:ae:8e:40:ad:bb:63:57:
c0:79:c3:b8:76:f8:1d:86:77:a7:4c:b9:f7:db:a6:18:7d:11:
39:62:93:7c:a2:01:ed:cf:65:3c:e0:8b:6a:1d:95:fc:5b:1e:
66:f8:86:bb:3a:61:69:12:73:d3:39:5c:d2:92:a6:ff:71:aa:
84:b6:5d:95:7c:63:82:61:80:f6:75:1c:f6:06:79:61:19:48:
90:18:21:40:6d:c6:99:98:6e:38:a0:92:a7:6d:72:10:80:49:
a3:56:f1:da:a5:91:0b:33:2b:26:3c:6e:f1:a1:a0:db:7c:09:
57:3f:a7:e4:93:c2:d5:4f:bc:a1:95:fa:3a:43:40:5d:87:18:
f4:23:e7:d9:52:55:26:b8:ed:b4:0f:ad:27:e7:60:43:f6:1e:
26:13:27:b3:8e:ca:a3:9a:d3:0a:83:c5:11:af:bf:2c:ec:1e:
43:4a:ce:a3:77:06:21:d5:f1:0f:b7:81:f7:53:81:ad:bd:02:
57:5d:43:8b:7d:9b:95:cd:3e:b7:fc:f1:cb:d9:8d:a7:56:c9:
7d:bd:59:2b:eb:3c:0a:b6:d6:a4:64:78:92:bb:c9:34:52:52:
c0:95:31:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:54:09 2025 by rpki-client